00ordin0ord.hashnode.dev·4d ago · 4 min readTryHackMe Boiler WalkthroughTryHackMe Boiler Walkthrough TrуHаckMe iѕ a famouѕ infоѕес-focused leаrnіng plауgrоund оfferіng еducation and practicing rooms for everyone interested. The Boiler CTF room is considered an intermedia00
LVLong Voinlongvh0904.hashnode.dev·Jul 21 · 42 min readHTB Attack Diaries - Bedside: The Clinic That Deserialized Its Own DeathIntroduction Bedside is a Medium-rated Linux box dressed up as a heart clinic "transitioning into the age of AI." And like most things that promise AI, what sits underneath the glossy paint is a chain00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 19 · 15 min readHackTheBox : Pterodactyl WriteupSummary Pterodactyl is a Linux box built around an unauthenticated RCE in the Pterodactyl game-server management panel. A static "MonitorLand" landing page on port 80 gives no functionality of its own00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 18 · 4 min readFAM CTF : The Vault Door WriteupSummary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 17 · 19 min readHackTheBox : Race WriteupSummary Race is a Linux box built around Grav CMS. The path in is a chain of small information leaks rather than one big bug: an exposed phpsysinfo instance with default creds leaks a process list, th00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 27 · 11 min readHackTheBox: Down WriteupExecutive Summary Down is an easy Linux machine running a simple "Is it down or just me?" web checker. The site uses curl server-side to test URLs - making it a classic SSRF target. The protocol filte00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 25 · 15 min readHackTheBox: Nexus WriteupExecutive Summary This writeup documents the complete exploitation chain for the Nexus target system, from initial reconnaissance through root compromise. The attack leveraged: Exposed credentials in00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 16 · 9 min readHackTheBox - Snapped WriteupDifficulty: Medium OS: Linux Tags: nginx-ui CVE-2026-27944 backup-disclosure bcrypt snapd CVE-2026-3888 race-condition suid privilege-escalation Reconnaissance We begin with a standard nmap scan to 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 11 · 10 min readHackTheBox - Abducted WriteupDifficulty: Medium Reconnaissance Nmap nmap -sC -sV -A <MACHINE-IP> -oA abducted PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.16 139/tcp open netbios-s00
JJebitokinsharonjebitok.com·Jun 4 · 37 min readMetasploit: Scanning and Exploitation (TryHackMe)Link to the Walkthrough/Challenge on TryHackMe: Metasploit: Scanning and Exploitation Introduction In the previous room, you learned how to navigate the Metasploit Framework: searching for modules, co00
